$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: mLe504C6szfuelCi906A2cp0JImj+DLkRdYH1m1fdP4= Subject key identifier: 36:AC:55:86:B5:DF:D6:EA:73:D5:92:27:5F:87:BD:43:8D:12:29:2F Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 321772A9F06D6998ECD3DE3AC7A186DB203ED055 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01C2 Signing time: Sat 23 Aug 2025 12:51:19 +0000 Manifest this update: Sat 23 Aug 2025 12:46:19 +0000 Manifest next update: Tue 26 Aug 2025 23:24:19 +0000 Files and hashes: 1: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 2: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: zhfT9dzqYt1bB25St2DI6pASSgOwxgdrMpQzPwr4zdA=) 3: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: RJCqubu8qbtGpPN7MXXSa7nQdF5Bw0374TSVNQhH0cg=) 4: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: c7yJCrV4DR6NdmhfhryUlKXgPbNfF2r9cWmA2UIUfRY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:17:72:a9:f0:6d:69:98:ec:d3:de:3a:c7:a1:86:db:20:3e:d0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Aug 23 12:46:19 2025 GMT Not After : Aug 26 23:24:19 2025 GMT Subject: CN=36AC5586B5DFD6EA73D592275F87BD438D12292F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:bc:a2:a9:74:c0:e4:92:19:f4:4f:50:91: d7:44:5e:8d:7d:0a:3f:9a:6b:18:91:8c:96:d0:30: 20:b6:2e:df:ee:11:8a:c3:c8:be:23:89:3c:85:f0: cc:f7:ee:17:72:81:14:0a:85:69:21:ec:a0:e4:7f: 29:ab:0d:76:c3:23:5c:83:ff:75:85:27:f8:d2:57: 33:0c:ea:bb:a8:00:db:01:71:61:5b:cd:b9:f1:6a: c9:dc:61:97:10:02:05:c3:3f:f4:63:2f:c5:0c:ec: ab:81:7f:86:b5:61:f8:59:6e:17:d8:58:62:d2:6a: b9:29:ea:d5:2d:ac:af:af:c0:df:16:06:30:f9:1a: 97:83:f5:47:fc:af:db:3c:fd:bc:7b:80:ef:25:a6: f6:16:66:85:ec:7d:63:0b:a3:a2:df:8d:eb:c6:47: aa:02:e9:5e:a2:b5:b6:59:93:2f:53:e1:2c:16:e4: a8:11:7d:8b:73:4e:18:90:d2:6d:48:23:ea:d8:16: 9c:21:0f:05:50:d9:72:22:be:30:30:3a:5e:9f:9a: d7:06:d9:66:57:60:61:0b:2b:10:55:c9:06:af:ac: 8e:ed:27:a7:2f:48:f6:cf:de:47:49:4b:72:00:e2: 0f:26:d7:17:ac:cc:26:91:73:95:ff:3c:ec:8e:ba: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AC:55:86:B5:DF:D6:EA:73:D5:92:27:5F:87:BD:43:8D:12:29:2F X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:bf:a0:5e:17:45:46:14:13:18:03:ba:0f:99:f6:1d:26:a3: ee:3a:25:ff:60:3d:b4:16:1b:42:74:ef:a9:31:b8:77:3d:90: da:e7:e1:1d:5e:18:7a:ca:be:9e:cf:fc:72:e9:4a:0b:12:01: c0:47:f7:50:6e:fa:dc:2a:3a:c4:9e:3f:ab:eb:88:04:2f:1c: 86:db:08:8e:9d:65:64:dc:72:14:c2:a9:32:10:60:8a:30:4d: a6:49:9c:5b:35:ec:21:7b:48:c7:0e:1e:7f:1a:54:81:d0:31: f6:ac:2f:28:71:d2:a6:dc:05:bf:56:86:09:74:dd:f2:ea:c7: 9e:09:aa:a5:f4:6c:a2:45:3e:8c:fc:d4:23:af:2c:33:f8:c4: 29:03:2b:69:be:01:48:50:d8:f3:91:50:65:f2:24:0e:1b:fb: 3f:70:47:d4:9c:30:67:41:c8:ed:e9:f2:8f:12:dc:80:63:ad: b9:06:12:1d:45:ad:16:9a:bd:9a:91:8e:94:6c:be:5a:c3:07: 37:88:06:52:da:98:c8:ba:94:6c:3a:f2:92:6c:32:f7:db:16: 81:26:0e:ed:fc:41:92:19:71:6e:32:e8:84:56:99:8c:a7:d9: 22:5d:bd:ab:68:61:78:fc:90:b8:e4:9b:fc:15:16:6d:af:a5: 1e:33:30:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhdyqfBtaZjs0946x6GG2yA+0FUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTA4MjMxMjQ2MTlaFw0yNTA4MjYyMzI0MTlaMDMxMTAvBgNV BAMTKDM2QUM1NTg2QjVERkQ2RUE3M0Q1OTIyNzVGODdCRDQzOEQxMjI5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZl7yiqXTA5JIZ9E9QkddEXo19 Cj+aaxiRjJbQMCC2Lt/uEYrDyL4jiTyF8Mz37hdygRQKhWkh7KDkfymrDXbDI1yD /3WFJ/jSVzMM6ruoANsBcWFbzbnxasncYZcQAgXDP/RjL8UM7KuBf4a1YfhZbhfY WGLSarkp6tUtrK+vwN8WBjD5GpeD9Uf8r9s8/bx7gO8lpvYWZoXsfWMLo6LfjevG R6oC6V6itbZZky9T4SwW5KgRfYtzThiQ0m1II+rYFpwhDwVQ2XIivjAwOl6fmtcG 2WZXYGELKxBVyQavrI7tJ6cvSPbP3kdJS3IA4g8m1xeszCaRc5X/POyOulLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNqxVhrXf1upz1ZInX4e9Q40SKS8wHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJK/oF4XRUYUExgDug+Z9h0mo+46Jf9gPbQW G0J076kxuHc9kNrn4R1eGHrKvp7P/HLpSgsSAcBH91Bu+twqOsSeP6vriAQvHIbb CI6dZWTcchTCqTIQYIowTaZJnFs17CF7SMcOHn8aVIHQMfasLyhx0qbcBb9Whgl0 3fLqx54JqqX0bKJFPoz81COvLDP4xCkDK2m+AUhQ2PORUGXyJA4b+z9wR9ScMGdB yO3p8o8S3IBjrbkGEh1FrRaavZqRjpRsvlrDBzeIBlLamMi6lGw68pJsMvfbFoEm Du38QZIZcW4y6IRWmYyn2SJdvatoYXj8kLjkm/wVFm2vpR4zMLU= -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:29 2025 by rpki-client